Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/1Ux5rVC6B2olrqQzR1Ftr8bE3kM.roa
File:                     1Ux5rVC6B2olrqQzR1Ftr8bE3kM.roa (raw, json)
Hash identifier:          xI4yWZL3Ab9Ae4SOCHQwbdPxQo4NZMLVVtTJI1+vhWw=
Subject key identifier:   D5:4C:79:AD:50:BA:07:6A:25:AE:A4:33:47:51:6D:AF:C6:C4:DE:43
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02BD
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/1Ux5rVC6B2olrqQzR1Ftr8bE3kM.roa
Signing time:             Mon 20 Feb 2023 08:07:22 +0000
ROA not before:           Mon 20 Feb 2023 08:07:22 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.62/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 701 (0x2bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:07:22 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=D54C79AD50BA076A25AEA43347516DAFC6C4DE43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a6:dc:a8:fe:5e:6e:95:1b:f1:45:79:05:77:
                    ae:27:8b:10:91:68:d1:fe:a1:28:c2:91:f1:08:62:
                    01:3c:31:41:1c:08:00:00:3b:52:be:fc:ca:e0:0c:
                    82:23:c9:c4:0f:21:71:d8:c9:71:94:01:41:ed:83:
                    cf:0a:6d:6e:8f:70:5e:e6:db:d3:56:2a:ff:b0:35:
                    36:c4:e2:ac:4d:6c:7d:69:26:12:36:13:78:cc:58:
                    ed:88:8b:b7:96:f3:a8:b0:47:72:e8:fa:cf:0f:41:
                    66:4f:47:c3:7d:41:cd:a3:0d:55:e6:c7:31:b8:0a:
                    5e:c3:9f:9c:26:87:51:5e:28:87:84:fc:88:b5:ee:
                    38:80:7e:86:69:27:f6:99:49:93:ad:b9:74:b0:da:
                    15:a6:d6:44:87:30:35:75:03:dc:d6:13:d3:d1:a7:
                    ac:41:ed:61:92:ef:47:25:9b:93:b8:4e:87:9c:86:
                    9e:e1:12:fe:9c:99:8e:d2:ab:e8:e9:74:2d:63:00:
                    64:5a:9a:7c:65:e5:55:09:0c:bd:70:5b:4c:a2:a8:
                    3d:d1:95:bc:ba:9d:4d:f4:5b:66:70:a7:64:6d:5e:
                    bc:5c:55:8c:31:05:40:9c:2a:ad:34:bf:78:96:86:
                    2b:41:8a:62:cc:e1:2e:65:71:7c:4e:d2:89:ec:3b:
                    fc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4C:79:AD:50:BA:07:6A:25:AE:A4:33:47:51:6D:AF:C6:C4:DE:43
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/1Ux5rVC6B2olrqQzR1Ftr8bE3kM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.62/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:9e:48:43:09:3f:bd:89:fd:84:85:c1:92:20:3b:05:25:0f:
         ec:7e:99:30:3b:bc:d1:3f:98:7c:6d:dc:19:db:5f:f5:fb:ad:
         d4:49:ac:c2:d1:13:f6:78:c4:ca:de:77:17:f3:c3:ba:b7:20:
         dc:43:4d:8a:e3:c5:07:63:9d:d0:0d:b2:93:53:9d:3e:7a:6d:
         40:bf:ed:b7:98:69:be:10:34:77:3d:d1:cd:c8:c7:e0:10:cb:
         20:20:38:db:4d:02:8f:76:3a:53:cc:59:98:0f:06:21:3c:62:
         a6:c5:3c:5e:f7:64:ca:d4:3b:34:0a:c1:e3:03:11:df:c5:cb:
         71:29:05:a2:6f:5a:94:f8:08:41:67:a8:92:8c:41:d0:bc:39:
         39:68:0a:d2:e7:b5:3e:ff:f3:03:d4:7e:e2:79:7b:f0:1d:24:
         4b:a0:d5:23:3e:09:b8:fb:90:ca:06:bd:cd:12:58:a4:d5:ec:
         90:28:e7:7e:17:8a:33:68:91:fd:ed:85:1d:7d:de:56:d8:af:
         36:e8:21:9c:09:16:e0:1c:53:69:f6:94:ff:24:e1:ff:9c:38:
         e9:84:56:07:5b:6a:6e:d1:b1:1e:1a:35:62:3e:d6:73:4c:ac:
         c0:46:b1:e3:eb:2b:87:e8:f8:a2:5d:79:51:57:b6:60:ee:ed:
         72:25:01:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:03 2023 by rpki-client on console-fra.rpki-client.org